1 hour ago
Shares of eMudhra Ltd., the firm that provides document procession automation, AI and data security platforms, fell as much as 20% on Wednesday, October 21, after private keys of eight certificates of the company were compromised, according to Mozilla.
In a blog post on the company's website, eMudhra cited Mozilla's post, which stated that private keys associated with eight eMudhra intermediate certificates had been compromised on October 17.
Mozilla blocked the affected certificates in Firefox through OneCRL, its centralized list of revoked certificates. The firm is also updating the trusted certificate list to remove the root certificate that signed the affected intermediates, to protect other applications that use Mozilla's trust store but do not receive OneCRL updates, the blog post stated.
eMudhra is actively investigating a security incident involving a specific set of intermediate CA certificates created as part of a Key Generation Ceremony (KGC) conducted in April 2025 within its public trust infrastructure. The incident is limited to these specific intermediate CA certificates and does not affect eMudhra's root CA private keys or other intermediate CAs.
EMUDHRA'S BLOG POST ON COMPANY'S WEBSITE
The blog post from eMudhra went on to add that upon becoming aware of the incident, eMudhra initiated its incident response procedures, took measures to contain the affected certificates, and began working closely with browser and root-store operators to safeguard users and maintain the integrity of the broader WebPKI ecosystem.
"We are conducting a thorough investigation into the circumstances surrounding the incident and reviewing our security controls and operational procedures to identify and implement any necessary improvements," the post added further.
The removal of the company's root CA's C1 and C3 with Mozilla, was a voluntary and planned activity and does not pertain to this security incident, the company stated, adding that further updates will be provided as the investigation progresses and additional findings are confirmed.
Shares of eMudhra are trading 20% lower on Wednesday at ₹432. This is the biggest single-day fall for the stock since its listing. The stock is down nearly 60% from its record high of ₹1,024, which the stock had surged to in December 2024.
